Eol - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/tags/eol/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSun, 12 Jul 2026 06:20:21 +0000Trendnet TEW-635BRM Web Service Stack-based Buffer Overflow Vulnerabilityhttps://feed.craftedsignal.io/briefs/2026-07-cve-2026-15480/Sun, 12 Jul 2026 06:20:21 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-07-cve-2026-15480/CVE-2026-15480 describes a stack-based buffer overflow vulnerability in the Trendnet TEW-635BRM router firmware, specifically in the start_httpd function within the /sbin/rc component's Web Service, which can be exploited remotely by manipulating the 'device_name' argument, potentially leading to arbitrary code execution; an exploit is publicly available, but the product is End-of-Life (EOL) since 2011, and the vendor advises users to switch devices.CVE-2026-15480 details a critical stack-based buffer overflow vulnerability affecting Trendnet TEW-635BRM router firmware versions up to 1.00.03. The flaw resides within the start_httpd function of the /sbin/rc component's Web Service. Threat actors can remotely exploit this vulnerability by sending specially crafted HTTP requests that manipulate the device_name argument. Such manipulation leads to a buffer overflow, which can result in arbitrary code execution on the affected device. While a public exploit is available, the affected product has been End-of-Life (EOL) since 2011, meaning no official patches will be released. The vendor explicitly recommends that users replace these devices due to the confirmed vulnerability and lack of support. This vulnerability poses a significant risk to organizations still utilizing these legacy devices, as successful exploitation grants attackers full control.

Attack Chain

  1. An unauthenticated remote attacker sends a specially crafted HTTP request to the vulnerable Trendnet TEW-635BRM router.
  2. The HTTP request targets the device's Web Service component, which is responsible for handling web-based management.
  3. The attacker includes an overly long or malformed value in the device_name argument within the HTTP request.
  4. The vulnerable start_httpd function, located in the /sbin/rc file, processes the manipulated device_name argument.
  5. Due to insufficient bounds checking, the function attempts to write the oversized input into a fixed-size buffer on the stack, leading to a stack-based buffer overflow.
  6. The overflow corrupts adjacent memory regions, allowing the attacker to overwrite critical data structures, including return addresses.
  7. By carefully controlling the overflow content, the attacker redirects the execution flow to their injected malicious code.
  8. Successful exploitation results in arbitrary code execution with the privileges of the web service, granting the attacker full control over the router.

Impact

Successful exploitation of CVE-2026-15480 grants unauthenticated remote attackers arbitrary code execution capabilities on affected Trendnet TEW-635BRM routers. Given that these devices are End-of-Life (EOL) and will not receive patches, any organization still using them faces a permanent and critical security risk. Attackers could gain complete control over the compromised router, enabling them to intercept or redirect network traffic, use the device as a pivot point into the internal network, launch further attacks, or incorporate the device into botnets. While no specific victim counts are provided, the public availability of an exploit means that any exposed, unreplaced device is a potential target.

Recommendation

  • Decommission or Isolate Device: Immediately decommission any Trendnet TEW-635BRM routers (CVE-2026-15480) given their End-of-Life status and the absence of patches. If decommissioning is not immediately feasible, isolate these devices from critical networks.
  • Replace Hardware: Replace all affected Trendnet TEW-635BRM routers with currently supported and patched network hardware.
]]>highadvisorynetworkvulnerabilityrouterbuffer-overflowrceeol